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ATTACHMENT A 
Amendments to the Claims 

This listing of claims will replace all prior versions, and listings, of claims in the application. 

1. (Currently Amended) A method for carrying out an authentication process for 
authenticating a subsequent transaction by any one of a plurality of users with data 
processing apparatus (W), including 

the step during the authentication process of operatively associating with the data 
processing apparatus (40) a selected one of a plurality of authentication storage means 
£43) respective to the users, each authentication storage means £13) storing predetermined 
authentication information and being registerable with a common telecommunications 
system £46) for which the users have respective telecommunications terminals, and 

the step of carrying out the authentication process via a communications link £±£) with the 
common telecommunications system-£46), 

the authentication process being carried out by authenticating means (18;102) 
incorporated in the telecommunications system £46) and involving the use of the 
predetermined authentication information stored by the selected one authentication 
storage means (12) , 
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the predetermined authentication information stored by each authentication 
storage means (43) corresponding to information which is used to authenticate that user's 
telecommunications terminal in relation to the telecommunications system £1-6) but the 
authentication process for authenticating the transaction by that user with the data 
processing apparatus £4-0) not requiring use of that user's telecommunications terminal nor 
requiring the telecommunications terminal to be actually authenticated by that information 
in relation to the telecommunications system-(46). 

2. (Currently Amended) A method according to claim 1, in which the authentication 
storage means (43) is associated with the data processing apparatus (4-0) by being 
associated with data or software for use by that data processing apparatus-(40). 

3. (Currently Amended) A method according to claim 2, in which the authentication 
storage means £42) is incorporated on a data carrier for the data or software. 

4. (Currently Amended) A method according to claim 1, in which the authentication 
storage means (43) includes processing means. 

5. (Currently Amended) A method according to claim 4, in which each user is 
authenticated in the telecommunications system (44) by means of the use of a smart card 
or subscriber identity module (e.g. SIM) , and in which the authentication storage means 
(46) respective to that user corresponds to or simulates the smart card for that user. 
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6. (Currently Amended) A method according to any pr e c e ding claimj_, in which the 
authentication process involves the sending of a message and the generation of a response 
dependent on the message and the predetermined information. 

7. (Currently Amended) A method according to any preceding claim JL, including the 
step of levying a charge for the transaction when authenticated. 

8. (Currently Amended) A method according to claim 7, in which the step of levying 
the charge is carried out by the said system-(46} i 

9. (Currently Amended) A method according to any pr e ceding claim J_, in which the 
data processing apparatus (10) is a personal computer. 

10. (Currently Amended) A method according to any one of claims l4e-9, wherein the 
authentication storage means (12) communicates wirelessly to authenticate the 
transaction. 

11. (Currently Amended) A method according to claim 5, wherein the authentication 
storage means £4-3) is one of a smart card ande f SIM that is operable to authenticate the 
user's telecommunications terminal for use in the system-{46). 

1 2. (Currently Amended) A method according to any one of claims 1 to 1 1 , wherein the 
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authentication storage means (42) is provided with a carrier (35) coupleable to 
the data processing apparatus-(K)). 

13. (Currently Amended) Data processing apparatus (40) in combination with a selected 
one of a plurality of authentication storage means £4-3) which are respective to users and 
are each for storing predetermined authentication information relating to the carrying out 
of an authentication process for authenticating a subsequent transaction by the users with 
the data processing apparatus-(4Q), 

the authentication storage means (12) all being registrable with a common 
telecommunications system (16) for which the users have respective telecommunications 
terminals, 

the authentication storage means (12) w hen operatively associated with the data 
processing apparatus (40) being operative to carry out the authentication process via a 
communications link (49) with that system, 

the authentication process being carried out by authenticating means (18; 102) 
incorporated in the system (40) and involving the use of the predetermined information 
stored by the selected one authentication storage means-(42), 

the predetermined authentication information stored by each authentication storage means 
(42) corresponding to information which is used to authenticate that user's 
telecommunications terminal in relation to the telecommunications system (46) but the 
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authentication process for authenticating the transaction by that user with the data 
processing apparatus £W)) not requiring that use of user's telecommunications terminal nor 
requiring the telecommunications terminal to be actually authenticated by that information 
in relation to the telecommunications system-£4-6). 

14. (Currently Amended) Apparatus according to claim 1 3, in which the authentication 
storage means £1-2} includes processing means. 

15. (Currently Amended) Apparatus according to claim 13 or 1 4, in which each user is 
authenticated in the telecommunications system £1-6) by means of the use of a smart card 
or subscriber identity module ( e .g. SIM) , and in which the authentication storage means 
£4-6) respective to that user corresponds to or simulates the smart card for that user. 

16. (Currently Amended) Apparatus according to claim 13, H or 15, in which the 
authentication process involves the sending of a message and the generation of a response 
dependent on the message and the predetermined information. 

1 7. (Currently Amended) Apparatus according to any one of claims 1 3 to 16 , including 
means for levying a charge for the transaction when authorised. 

18. (Currently Amended) Apparatus according to claim 17, in which the means for 
levying the charge is part of the common system-(+6). 
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19. (Currently Amended) Apparatus according to any on e of claims 13 to 18 , wherein 
the authenticate storage means (42) communicates wirelessly to authenticate the 
transaction. 

20. (Currently Amended) Apparatus according to claim 15, wherein the authentication 
storage means (4-2) is one of a t he smart card ando f SIM that is further operable to 
authenticate the user's telecommunications terminal for use in the system. 

2 1 . (Currently Amended) Apparatus according to any on e of claims 1 3 to 20 , wherein 
the authentication storage means (42) is provided with a carrier (32) coupleable to the 
data processing apparatus-(40). 

22. (Currently Amended) A data carrier carrying data for use in and by data processing 
apparatus (4-0) after an authentication process involving the use of the data processing 
apparatus (4G) and separate authenticating means (18; 102) , 

-the data carrier also incorporating authentication storage means (12) storing 
predetermined authentication information respective to a user, 

the authentication storage means (4-2) being registered with a telecommunications system 
(1-6) which includes the authenticating means (18; 102) and for which the user has a 
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telecommunications terminal, 



the authentication storage means (42) being responsive to an input message for deriving a 
response dependent on the input message and on the authentication information for 
enabling the authenticating means (18;102) to carry out the authentication process via a 
communication link £49) with the authenticating means (18; 102) in the said system £1-6) 
whereby to authenticate a subsequent transaction by the user with the data processing 
apparatus and which involves use of the data carried by the data carrier, 

the predetermined authentication information stored by the authentication storage means 
(43) corresponding to information which is used to authenticate the user registered with 
the telecommunications system (46) in relation to use of that user's telecommunications 
terminal in the telecommunications system (16) , but the authentication process for 
authenticating the transaction by that user with the data processing apparatus (40) not 
requiring use of the user's telecommunications terminal nor requiring the 
telecommunications terminal to be actually authenticated by that information in relation to 
the telecommunications system-(46). 

23. (Currently Amended) A data carrier according to claim 22, in which the 
authentication storage means corresponds to or simulates respective subscriber identity 
modules (SIMs) in the form of smart cards. 
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24. (Currently Amended) A data carrier according to claim 22 or 23 , in which the 
data carried by the data carrier includes software. 

25. (Currently Amended) A data carrier according to any one of claims 22 to 24 , 
wherein the authentication storage means (12) communicates wirelessly to authenticate 
the transaction. 

26. (Currently Amended) A data carrier according to claim 23, wherein the 
authentication storage means f±3) is one of a the smart card ande y SIM that is further 
operable to authenticate the user's telecommunications terminal for use in the system. 
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